THC-Rut

THC-Rut is like your trusty knife when you're diving into foreign networks. It helps you gather all sorts of information from both local and remote networks, making it pretty handy for network exploration.

Network Discovery Made Easy

This software comes packed with a bunch of network discovery tools. You can do things like ARP lookups across an IP range, send spoofed DHCP requests, and even check out RARP, BOOTP, and ICMP-ping options. Plus, it’s got ICMP address mask requests and OS fingerprinting to boot! High-speed host discovery is also on the list—so you won't be waiting around forever.

Awesome OS Fingerprinting Features

THC-RUT has a cool OS host Fingerprinter feature that figures out the remote operating system based on open or closed port characteristics. It uses techniques like banner matching and nmap fingerprinting methods (T1, tcpoptions) to get the job done. This tool was designed to quickly categorize hosts within a Class B network in just about 10 minutes!

Reliable Information Sources

The fingerprinter pulls info from various sources such as SNMP replies, telnetd (NVT) negotiation options, generic banner matching, HTTP server versions, DCE requests, and TCP options. It's also compatible with the nmap-os-fingerprints database while having its own Perl regex capable fingerprinting database called thcrut-os-fingerprints.

A Quick Example of OS Fingerprinting

If you want to see how it works, here's an example command:

# ./thcrut discover -O 192.168.0.1-192.168.255.254


  128321 packets received by filter, 0 packets dropped by kernel


  Completed in 8 minutes, 38 seconds.

If you're eager to explore more about THC-Rut, check out this link!